Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer (raw, json)
Hash identifier: tUbaSmrWQf8/eXcF8XRrdPJdByRSMLOMZWw3HBMi0mE=
Subject key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E375FC3A41D794FE285E9FAEF0FF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 1895
IP: 131.188.0.0/16
IP: 192.44.81.0 -- 192.44.90.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:37:5f:c3:a4:1d:79:4f:e2:85:e9:fa:ef:0f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:93:52:47:73:49:3c:6c:d6:dd:42:fe:53:
95:ab:c2:e8:86:a0:c7:ee:a4:1e:cb:35:d6:4c:86:
d7:c3:33:a9:e3:8a:f4:0a:b1:84:b4:10:b5:08:77:
fd:b1:1d:1c:65:fc:6e:42:8c:e6:81:18:8e:5f:3c:
1e:83:29:6e:c5:69:78:8a:bc:74:a0:d6:0d:7e:ad:
bd:37:57:7c:b5:9a:4d:a4:74:65:e5:9e:ca:25:5e:
15:8b:73:24:4c:1b:33:bb:8f:c3:4a:6d:dc:38:18:
40:30:0b:79:ec:70:f3:2b:30:03:ae:19:5f:d3:88:
f0:a7:3f:d8:80:61:bb:db:c5:04:12:00:ec:79:6e:
ba:74:e3:bd:d7:a3:ae:65:f0:db:69:6a:6e:fb:24:
3e:62:5f:62:a6:e3:da:ed:f7:f0:34:39:69:6d:d7:
6a:24:b7:ec:f9:33:c4:22:e5:fe:85:5d:02:f9:c2:
ff:77:24:e8:9b:43:01:5f:40:1c:2d:b6:83:17:d4:
81:8d:c9:92:9b:c9:12:fb:63:47:74:dd:34:55:e6:
24:60:27:ff:ef:1d:4e:a1:84:91:68:32:86:ce:70:
9d:89:0f:62:ab:31:33:64:a9:f0:66:dd:aa:9e:05:
ba:09:f7:66:55:d3:80:4a:9d:98:c0:d4:b7:92:83:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.188.0.0/16
192.44.81.0-192.44.90.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1895
Signature Algorithm: sha256WithRSAEncryption
90:73:c7:9f:69:df:69:ff:46:e8:eb:aa:e8:9e:37:de:c9:bc:
cd:92:47:91:ce:50:d5:2e:db:6d:c0:08:2b:d9:59:f7:44:d9:
46:b0:43:ab:90:9a:8a:a8:43:e6:f0:c6:ff:55:3d:45:84:fe:
a2:e0:f3:70:a6:59:07:97:96:75:9a:7c:22:c2:a7:89:c5:8b:
68:6b:58:0f:4e:f9:07:ba:63:6f:63:30:ab:44:ee:ee:6c:81:
dd:79:26:c7:ef:60:03:53:5c:ad:6f:06:74:c2:b2:91:1f:5d:
e8:54:61:53:cd:66:ef:57:4d:c6:76:18:a6:6e:3a:12:ef:97:
f3:86:ee:29:02:ed:b3:30:c7:96:b3:70:dc:c0:c1:00:d2:9b:
f5:f8:76:18:24:06:37:a9:a2:ef:30:ab:51:4c:dc:c4:73:ea:
08:07:b4:4d:62:c1:81:03:7f:93:e6:3c:78:a7:0c:ff:3e:23:
3e:3f:ef:9c:c7:aa:96:77:b1:ab:27:42:f5:4e:95:d2:a9:dd:
e5:f6:d3:29:9e:d2:cc:83:2e:18:cb:a6:7f:9d:3e:3f:99:8e:
30:ee:6b:e6:e1:bc:6a:3d:49:db:7e:43:06:db:59:61:62:ed:
ae:6e:61:47:c8:7f:d4:1a:8b:69:91:2d:60:73:26:fe:67:45:
5d:61:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:59:31 2024 by rpki-client on console-ams.rpki-client.org